Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa
File:                     3130332e36362e34362e302f32332d3233203d3e203233363934.roa (raw, json)
Hash identifier:          Ez6QIdOXrwH3cf8oEyXk+iBGNJ8xFXIz0jGNdzgCm5M=
Subject key identifier:   93:41:D0:1F:60:13:EF:30:AE:78:7E:87:48:9D:D5:04:48:CC:71:87
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       73B96AD7247B1A44D58B1352C4E51C2B488A1703
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa
Signing time:             Thu 08 May 2025 12:00:40 +0000
ROA not before:           Thu 08 May 2025 11:55:40 +0000
ROA not after:            Thu 07 May 2026 12:00:40 +0000
asID:                     23694
IP address blocks:        103.66.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 15:40:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b9:6a:d7:24:7b:1a:44:d5:8b:13:52:c4:e5:1c:2b:48:8a:17:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: May  8 11:55:40 2025 GMT
            Not After : May  7 12:00:40 2026 GMT
        Subject: CN=9341D01F6013EF30AE787E87489DD50448CC7187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:75:d9:86:86:c2:eb:83:c9:e1:72:12:60:
                    d0:e1:65:e4:e2:ea:98:91:01:23:98:6b:2b:54:3a:
                    c8:a4:64:45:87:25:20:ae:7a:db:87:29:7f:f1:b2:
                    1a:57:f7:33:2d:3b:72:8d:72:3c:d7:68:a8:c3:4c:
                    c3:00:c4:7e:13:64:3c:71:43:2f:28:9f:8a:97:a5:
                    f7:4b:71:0f:70:22:53:b8:74:d8:e4:5d:51:80:4d:
                    e4:aa:f7:60:67:69:92:d8:0c:47:f8:3a:94:67:15:
                    63:cd:e5:07:08:f3:32:0c:1d:95:0d:6d:84:40:db:
                    e5:da:d6:7d:2e:7c:6e:f5:ec:4b:95:7e:99:e9:39:
                    78:77:2c:87:60:87:a0:cd:fb:c6:57:13:0f:6a:79:
                    36:0a:e4:e0:7d:38:86:cf:ff:23:c5:66:2d:e2:8b:
                    eb:17:6f:78:2a:be:34:43:48:99:8c:f0:67:bf:de:
                    8b:0d:79:46:7d:58:7f:e1:57:60:2d:ac:af:56:dc:
                    3d:41:16:3b:49:b6:d3:ff:01:6f:ff:c0:48:7f:8d:
                    30:25:85:94:8a:e1:1d:c4:63:d9:a8:70:20:3c:48:
                    52:af:a8:a1:d5:87:72:6d:f1:6d:e0:e4:bd:4d:ca:
                    a9:52:19:4b:28:d0:d9:53:3f:ea:45:92:5d:97:eb:
                    94:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:41:D0:1F:60:13:EF:30:AE:78:7E:87:48:9D:D5:04:48:CC:71:87
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32332d3233203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:15:4a:9f:39:bc:14:2e:7e:b3:10:e3:f3:7c:df:67:b4:cb:
         ee:09:0b:98:2c:a1:90:1c:17:80:65:23:ea:00:d4:f4:2e:41:
         23:1d:0c:b7:bb:df:ea:2b:02:4f:3f:fd:10:38:c8:3f:c0:19:
         c7:05:81:ea:6f:47:75:52:e8:45:96:73:f0:d8:20:75:0e:8e:
         26:35:de:76:38:c8:f0:7d:0b:34:20:26:fa:b1:20:6b:6a:53:
         a8:1a:02:86:8b:15:6d:d9:5b:62:f8:c5:25:df:69:37:8e:3c:
         60:2d:69:56:19:2d:8a:c4:6f:f1:fe:05:6e:2c:d3:b4:02:a4:
         5d:8b:11:49:54:ab:15:41:83:9b:73:98:43:ba:fc:85:f8:d5:
         23:dc:02:98:d6:55:b2:a3:ff:58:35:3a:70:91:fd:99:20:7f:
         e0:f1:fd:97:58:a0:01:cc:8b:16:af:c8:5e:5b:fd:b9:f6:0d:
         2a:f9:69:a0:5b:8c:bb:c0:d2:05:95:59:f4:0e:44:1c:fc:f5:
         91:04:57:79:8d:6c:19:06:c0:5e:88:49:1b:7f:04:c0:0f:47:
         41:b0:d2:14:2f:b5:4b:2f:95:98:7b:f3:84:48:df:96:9a:44:
         28:a6:90:e3:6f:4d:d3:8f:69:40:ed:d1:8b:27:a5:07:eb:14:
         84:eb:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:36:46 2025 by rpki-client